| Name | IP | Country | ASN | ASN Name | Trigger Process Type |
|---|---|---|---|---|---|
| 8.8.4.4 | United States | 15169 | Level 3 Parent, LLC | Malware Process | |
| 119.147.163.227 | China | 58466 | CHINANET Guangdong province network Data Communication Division China Telecom | Malware Process | |
| 121.201.47.218 | China | 58543 | Guangdong RuiJiang Science and Tech Ltd. Room 404 ,No.100, Lingnan Avenue North, Lingnan Building, Foshan, GuangDong, | Malware Process | |
| 151.101.2.133 | United States | 54113 | Fastly | Malware Process | |
| 23.215.131.200 | United States | 20940 | Akamai Technologies, Inc. | OS Process | |
| web.4399.com | 157.185.170.133 | United States | 54994 | QUANTIL NETWORKS INC | Malware Process |
| ocsp.digicert.com | 72.21.91.29 | United States | 15133 | Not known | Malware Process |
| record.4399.com | 121.14.36.75 | China | 58466 | beijingshichaoyangqujiuxianqiaolujia12haodianzichengkejidashasiceng411hao | Malware Process |
| ocsp2.digicert.com | 72.21.91.29 | United States | 15133 | MCI Communications Services, Inc. d/b/a Verizon Business | Malware Process |
| ctldl.windowsupdate.com | 23.215.131.176 | United States | 20940 | Akamai Technologies, Inc. | OS Process |
| client.5054399.com | 219.129.239.26 | China | 58543 | CHINANET Guangdong province network Data Communication Division China Telecom | Malware Process |
| crl.globalsign.net | 151.101.22.133 | United States | 54113 | Fastly | Malware Process |
| pic.my4399.com | 157.185.170.133 | United States | 54994 | QUANTIL NETWORKS INC | Malware Process |
| webpic.my4399.com | 157.185.158.198 | United States | 54994 | QUANTIL NETWORKS INC | Malware Process |
| www.baidu.com | 104.193.88.123 | United States | 55967 | Baidu USA LLC | Malware Process |
| txt.unionli.com | 121.201.47.33 | China | 4134 | Guangdong RuiJiang Science and Tech Ltd. Room 404 ,No.100, Lingnan Avenue North, Lingnan Building, Foshan, GuangDong, | Malware Process |
| crl.microsoft.com | 23.215.131.195 | United States | 20940 | Akamai Technologies, Inc. | OS Process |
| b.533y.com | 121.201.47.33 | China | 4134 | Guangdong RuiJiang Science and Tech Ltd. Room 404 ,No.100, Lingnan Avenue North, Lingnan Building, Foshan, GuangDong, | Malware Process |
| Host | Port | Method | Version | User Agent | Count | Call Time During Execution(Sec) |
|---|---|---|---|---|---|---|
| b.533y.com | 80 | GET | 1.1 | LHL | 1 | 6.83801794052 |
|
Path: /_regevent.gif?event=100&ename=%E6%89%93%E5%BC%80&type=0&game=z&oid=16311&oid1=16311&oid2=&cid=39531&aid=70236&lc=0&userSession=08:00:27:CB:30:5F&newStat=0&referer=http%3A%2F%2Fweb%2E4399%2Ecom%2Fz%2Fclients%2Fzt%5Fsmba%5Fzddl%2Freg%2Ehtml%3Fagid%3D22100%26cid%3D39531%26aid%3D70236%26oid%3D16311%26oid2%3D%26vcode%3Dcafes%26dirtype%3D0%26pt%3D0 URI: http://b.533y.com/_regevent.gif?event=100&ename=%E6%89%93%E5%BC%80&type=0&game=z&oid=16311&oid1=16311&oid2=&cid=39531&aid=70236&lc=0&userSession=08:00:27:CB:30:5F&newStat=0&referer=http%3A%2F%2Fweb%2E4399%2Ecom%2Fz%2Fclients%2Fzt%5Fsmba%5Fzddl%2Freg%2Ehtml%3Fagid%3D22100%26cid%3D39531%26aid%3D70236%26oid%3D16311%26oid2%3D%26vcode%3Dcafes%26dirtype%3D0%26pt%3D0 |
||||||
| client.5054399.com | 80 | GET | 1.1 | LHL | 1 | 7.09769892693 |
|
Path: /active.htm?tag=Z70236&ver=3.0.0.1&count=1&apartdays=0&keepdays=1&weekdays=1 URI: http://client.5054399.com/active.htm?tag=Z70236&ver=3.0.0.1&count=1&apartdays=0&keepdays=1&weekdays=1 |
||||||
| web.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 8.37236595154 |
|
Path: /z/clients/zt_smba_zddl/reg.html?oid=16311&oid2=&vcode=cafes&dirtype=0&pt=0agid=22100&cid=39531&aid=70236&game=z&did=p6p2h462q385g714h378u343m392e371a392y35yl315n378l378f371d7d7x7xxf336i7i7r679c868v336s385c392x462g49gg462b49bw49wk336f336n336q371d336u378x378w35w&vid=54cdc5495f19770b35ee4c1659ab7891&mac=08:00:27:CB:30:5F&toAd=1&autorun=0 URI: http://web.4399.com/z/clients/zt_smba_zddl/reg.html?oid=16311&oid2=&vcode=cafes&dirtype=0&pt=0agid=22100&cid=39531&aid=70236&game=z&did=p6p2h462q385g714h378u343m392e371a392y35yl315n378l378f371d7d7x7xxf336i7i7r679c868v336s385c392x462g49gg462b49bw49wk336f336n336q371d336u378x378w35w&vid=54cdc5495f19770b35ee4c1659ab7891&mac=08:00:27:CB:30:5F&toAd=1&autorun=0 |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 10.3062129021 |
|
Path: /re/cms/z/clients/zt_smba_zddl/css/theme.css URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/css/theme.css |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 10.4032828808 |
|
Path: /js/core.js URI: http://pic.my4399.com/js/core.js |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 10.4037778378 |
|
Path: /re/cms/feUtil/effectTj/1.1/effectTj.js URI: http://pic.my4399.com/re/cms/feUtil/effectTj/1.1/effectTj.js |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 11.4716930389 |
|
Path: /re/cms/z/clients/zt_smba_zddl/css/bb.jpg URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/css/bb.jpg |
||||||
| web.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 11.5671229362 |
|
Path: /util/get_login.php?&jsoncallback=jsonp_04269758833383082 URI: http://web.4399.com/util/get_login.php?&jsoncallback=jsonp_04269758833383082 |
||||||
| web.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 12.3291628361 |
|
Path: /util/?_c=code&t=reg URI: http://web.4399.com/util/?_c=code&t=reg |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 12.526859045 |
|
Path: /re/cms/z/clients/zt_smba_zddl/css/video.swf URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/css/video.swf |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 12.531208992 |
|
Path: /re/cms/z/clients/zt_smba_zddl/css/bg1.png URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/css/bg1.png |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 12.8538439274 |
|
Path: /re/cms/web/js/config.js URI: http://pic.my4399.com/re/cms/web/js/config.js |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 13.1176228523 |
|
Path: /re/cms/web/js/lib/jquery.js?v1.7.2 URI: http://pic.my4399.com/re/cms/web/js/lib/jquery.js?v1.7.2 |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 13.1291379929 |
|
Path: /re/cms/web/js/web_referer.js URI: http://pic.my4399.com/re/cms/web/js/web_referer.js |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 13.2312538624 |
|
Path: /re/cms/web/js/user/action.js URI: http://pic.my4399.com/re/cms/web/js/user/action.js |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 13.4830088615 |
|
Path: /re/cms/z/clients/zt_smba_zddl/js/autologin.js URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/js/autologin.js |
||||||
| record.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 14.4518609047 |
|
Path: /a.php?r=&s=800x600&fv=12.0 URI: http://record.4399.com/a.php?r=&s=800x600&fv=12.0 |
||||||
| webpic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.3512179852 |
|
Path: /re/cms/z/clients/zt_smba_zddl/css/sound.swf URI: http://webpic.my4399.com/re/cms/z/clients/zt_smba_zddl/css/sound.swf |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.3790960312 |
|
Path: /re/cms/clients/js/client_old_reg.js URI: http://pic.my4399.com/re/cms/clients/js/client_old_reg.js |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.60501194 |
|
Path: /re/cms/web/js/module/util.js URI: http://pic.my4399.com/re/cms/web/js/module/util.js |
||||||
| pic.my4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.671036005 |
|
Path: /re/cms/feUtil/easydialog/2.2/easydialog.min.js URI: http://pic.my4399.com/re/cms/feUtil/easydialog/2.2/easydialog.min.js |
||||||
| web.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.9735848904 |
|
Path: /util/get_login.php?&jsoncallback=jsonp_05604826788807868 URI: http://web.4399.com/util/get_login.php?&jsoncallback=jsonp_05604826788807868 |
||||||
| web.4399.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 15.9738600254 |
|
Path: /util/get_login.php?&jsoncallback=jsonp_05643016475029259 URI: http://web.4399.com/util/get_login.php?&jsoncallback=jsonp_05643016475029259 |
||||||
| txt.unionli.com | 80 | GET | 1.1 | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) | 1 | 16.5884549618 |
|
Path: /txlink.gif?alid=70236&oid=16311&time=1534806157492 URI: http://txt.unionli.com/txlink.gif?alid=70236&oid=16311&time=1534806157492 |
||||||
| ctldl.windowsupdate.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 25.1377859116 |
|
Path: /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b4cf496d0d7c580c URI: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b4cf496d0d7c580c |
||||||
| ctldl.windowsupdate.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 25.1923780441 |
|
Path: /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?37ba3c5494beeaf9 URI: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?37ba3c5494beeaf9 |
||||||
| ocsp.digicert.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 2 | 33.8585679531 |
|
Path: /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAWAJn8G8pVTNI4cGFpe7i4%3D URI: http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAWAJn8G8pVTNI4cGFpe7i4%3D |
||||||
| ocsp2.digicert.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 39.6611249447 |
|
Path: /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRJrF0xYA49jC3D83fgDGesaUkzIQQUf9OZ86BHDjEAVlYijrfMnt3KAYoCEA%2Bo0zpfaDx76QP%2FphgC0qo%3D URI: http://ocsp2.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRJrF0xYA49jC3D83fgDGesaUkzIQQUf9OZ86BHDjEAVlYijrfMnt3KAYoCEA%2Bo0zpfaDx76QP%2FphgC0qo%3D |
||||||
| crl.microsoft.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 70.7702920437 |
|
Path: /pki/crl/products/tspca.crl URI: http://crl.microsoft.com/pki/crl/products/tspca.crl |
||||||
| crl.microsoft.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 76.6046800613 |
|
Path: /pki/crl/products/CodeSignPCA2.crl URI: http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl |
||||||
| crl.microsoft.com | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 82.0812180042 |
|
Path: /pki/crl/products/WinPCA.crl URI: http://crl.microsoft.com/pki/crl/products/WinPCA.crl |
||||||
| crl.globalsign.net | 80 | GET | 1.1 | Microsoft-CryptoAPI/6.1 | 1 | 87.7261450291 |
|
Path: /primobject.crl URI: http://crl.globalsign.net/primobject.crl |
||||||
| Request | Type |
|---|---|
| www.baidu.com | A |
|
Answers - www.a.shifen.com (CNAME) - 104.193.88.77 (A) - 104.193.88.123 (A) - www.wshifen.com (CNAME) |
|
| client.5054399.com | A |
|
Answers - client.r.4399api.net (CNAME) - 219.129.239.26 (A) |
|
| b.533y.com | A |
|
Answers - 121.201.47.218 (A) - 121.201.47.33 (A) |
|
| web.4399.com | A |
|
Answers - web.my4399.com (CNAME) - web.4399.com.lxdns.com (CNAME) - 157.185.170.133 (A) - 4399hw.xdwscache.speedcdns.com (CNAME) |
|
| webpic.my4399.com | A |
|
Answers - webpic.my4399.com.cdn20.com (CNAME) - 157.185.158.198 (A) |
|
| pic.my4399.com | A |
|
Answers - pic.my4399.com.cdn20.com (CNAME) |
|
| record.4399.com | A |
|
Answers - record.me4399.com (CNAME) - 119.147.163.227 (A) |
|
| txt.unionli.com | A |
| ctldl.windowsupdate.com | A |
|
Answers - ctldl.windowsupdate.nsatc.net (CNAME) - 23.215.131.176 (A) - a1621.g.akamai.net (CNAME) - ctldl.windowsupdate.com.edgesuite.net (CNAME) - 23.215.131.169 (A) |
|
| ocsp.digicert.com | A |
|
Answers - cs9.wac.phicdn.net (CNAME) - 72.21.91.29 (A) |
|
| ocsp2.digicert.com | A |
| crl.microsoft.com | A |
|
Answers - crl.www.ms.akadns.net (CNAME) - 23.215.131.200 (A) - 23.215.131.195 (A) - a1363.dscg.akamai.net (CNAME) |
|
| crl.globalsign.net | A |
|
Answers - 151.101.66.133 (A) - 151.101.2.133 (A) - global.prd.cdn.globalsign.com (CNAME) - 151.101.194.133 (A) - 151.101.130.133 (A) - prod.globalsign.map.fastly.net (CNAME) |
|
| Call Time During Execution(sec) | Source IP | Dest IP | Dest Port |
|---|---|---|---|
| 6.83801794052 | Sandbox | 121.201.47.218 | 80 |
| 7.09769892693 | Sandbox | 219.129.239.26 | 80 |
| 8.37236595154 | Sandbox | 157.185.170.133 | 80 |
| 10.3062129021 | Sandbox | 157.185.158.198 | 80 |
| 10.4032828808 | Sandbox | 157.185.170.133 | 80 |
| 10.4037778378 | Sandbox | 157.185.170.133 | 80 |
| 11.4716930389 | Sandbox | 157.185.158.198 | 80 |
| 11.5671229362 | Sandbox | 157.185.170.133 | 80 |
| 12.3291628361 | Sandbox | 157.185.170.133 | 80 |
| 12.526859045 | Sandbox | 157.185.158.198 | 80 |
| 12.531208992 | Sandbox | 157.185.158.198 | 80 |
| 12.8538439274 | Sandbox | 157.185.170.133 | 80 |
| 13.1291379929 | Sandbox | 157.185.170.133 | 80 |
| 14.4518609047 | Sandbox | 119.147.163.227 | 80 |
| 15.3790960312 | Sandbox | 157.185.170.133 | 80 |
| 15.671036005 | Sandbox | 157.185.170.133 | 80 |
| 15.9735848904 | Sandbox | 157.185.170.133 | 80 |
| 15.9738600254 | Sandbox | 157.185.170.133 | 80 |
| 16.5884549618 | Sandbox | 121.201.47.218 | 80 |
| 17.7394759655 | Sandbox | 121.201.47.218 | 443 |
| 17.7509698868 | Sandbox | 121.201.47.218 | 443 |
| 25.1377859116 | Sandbox | 23.215.131.176 | 80 |
| 25.1923780441 | Sandbox | 23.215.131.176 | 80 |
| 33.8585679531 | Sandbox | 72.21.91.29 | 80 |
| 33.9225919247 | Sandbox | 72.21.91.29 | 80 |
| 39.6611249447 | Sandbox | 72.21.91.29 | 80 |
| 70.7702920437 | Sandbox | 23.215.131.200 | 80 |
| 87.7261450291 | Sandbox | 151.101.2.133 | 80 |
| Call Time During Execution(sec) | Source IP | Dest IP | Dest Port |
|---|---|---|---|
| 3.06789588928 | Sandbox | 224.0.0.252 | 5355 |
| 3.09398388863 | Sandbox | 224.0.0.252 | 5355 |
| 3.1451690197 | Sandbox | 192.168.56.255 | 137 |
| 3.16460204124 | Sandbox | 239.255.255.250 | 3702 |
| 5.55412888527 | Sandbox | 8.8.4.4 | 53 |
| 5.65668702126 | Sandbox | 224.0.0.252 | 5355 |
| 6.35474991798 | Sandbox | 8.8.4.4 | 53 |
| 6.35622596741 | Sandbox | 8.8.4.4 | 53 |
| 7.59557890892 | Sandbox | 8.8.4.4 | 53 |
| 9.15453505516 | Sandbox | 192.168.56.255 | 138 |
| 9.99210095406 | Sandbox | 8.8.4.4 | 53 |
| 9.99672985077 | Sandbox | 8.8.4.4 | 53 |
| 13.4211390018 | Sandbox | 8.8.4.4 | 53 |
| 15.9556009769 | Sandbox | 8.8.4.4 | 53 |
| 19.6383080482 | Sandbox | 224.0.0.252 | 5355 |
| 19.6414470673 | Sandbox | 224.0.0.252 | 5355 |
| 22.3705868721 | Sandbox | 224.0.0.252 | 5355 |
| 22.3709259033 | Sandbox | 224.0.0.252 | 5355 |
| 25.0584259033 | Sandbox | 8.8.4.4 | 53 |
| 25.0709848404 | Sandbox | 8.8.4.4 | 53 |
| 28.1928880215 | Sandbox | 224.0.0.252 | 5355 |
| 28.1933808327 | Sandbox | 224.0.0.252 | 5355 |
| 31.0457239151 | Sandbox | 224.0.0.252 | 5355 |
| 31.2182779312 | Sandbox | 224.0.0.252 | 5355 |
| 33.8094849586 | Sandbox | 8.8.4.4 | 53 |
| 33.809773922 | Sandbox | 8.8.4.4 | 53 |
| 34.3151140213 | Sandbox | 224.0.0.252 | 5355 |
| 37.0199298859 | Sandbox | 224.0.0.252 | 5355 |
| 39.561070919 | Sandbox | 8.8.4.4 | 53 |
| 64.9456319809 | Sandbox | 224.0.0.252 | 5355 |
| 67.9815878868 | Sandbox | 224.0.0.252 | 5355 |
| 70.6587810516 | Sandbox | 8.8.4.4 | 53 |
| 71.0894980431 | Sandbox | 224.0.0.252 | 5355 |
| 73.9539339542 | Sandbox | 224.0.0.252 | 5355 |
| 76.727782011 | Sandbox | 224.0.0.252 | 5355 |
| 79.3534579277 | Sandbox | 224.0.0.252 | 5355 |
| 82.2418789864 | Sandbox | 224.0.0.252 | 5355 |
| 84.8709259033 | Sandbox | 224.0.0.252 | 5355 |
| 87.6759889126 | Sandbox | 8.8.4.4 | 53 |